CVE-2026-82432: Description Nimbus validated `topology.blobstore.map` against the calling subject at submission time only. The rebalanc

Nimbus (a component in Apache Storm that manages distributed computing tasks) had a security flaw where it only checked permissions when a topology (a distributed computing job) was first submitted, but not when it was rebalanced (redistributed across servers). This allowed someone authorized to rebalance a topology to access blobs (binary data objects) they shouldn't have access to. Additionally, a separate operation called `listBlobs` didn't check permissions at all and revealed all blob names to anyone who could reach Nimbus, making the first attack practical.